Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/RY2yWwsA0hRTnXxR0zqCYLReI8Y.roa
File: RY2yWwsA0hRTnXxR0zqCYLReI8Y.roa (raw, json)
Hash identifier: G6ENT4RLTZxM8O7qZFl/yaLwLs/TMVZbR0E7JMrkKr4=
Subject key identifier: 45:8D:B2:5B:0B:00:D2:14:53:9D:7C:51:D3:3A:82:60:B4:5E:23:C6
Certificate issuer: /CN=1ee51ed90c49cae92fca2e8238114c7638380483
Certificate serial: 698CA8
Authority key identifier: 1E:E5:1E:D9:0C:49:CA:E9:2F:CA:2E:82:38:11:4C:76:38:38:04:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuUe2QxJyukvyi6COBFMdjg4BIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/RY2yWwsA0hRTnXxR0zqCYLReI8Y.roa
Signing time: Sat 01 Jan 2022 00:52:15 +0000
ROA not before: Sat 01 Jan 2022 00:52:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209014
IP address blocks: 146.19.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6917288 (0x698ca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee51ed90c49cae92fca2e8238114c7638380483
Validity
Not Before: Jan 1 00:52:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=458db25b0b00d214539d7c51d33a8260b45e23c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:a1:a2:26:46:c0:df:eb:66:69:fd:12:1c:
c6:c8:eb:1c:4a:8d:97:d7:38:f5:74:b8:f8:1b:2b:
73:3b:73:ae:5c:e2:27:9c:3d:60:b6:d6:ae:2c:5b:
28:86:e5:d2:fb:e0:a7:ac:b4:58:29:40:6a:f7:47:
4f:47:6b:96:56:04:ce:9f:6b:fe:49:d8:cb:bd:6c:
f9:0d:4d:72:1b:df:1d:e8:6c:ba:99:93:d8:18:75:
6c:eb:a0:6c:e8:17:ec:61:22:fe:6a:27:29:82:c2:
2d:7b:77:42:53:18:0f:91:20:ae:c6:8a:36:0c:41:
35:ce:88:24:2d:26:72:df:27:f7:4e:18:03:2e:c4:
c7:0c:4f:49:3c:eb:16:c4:da:88:e3:a4:bf:73:b8:
b0:41:f5:2b:e2:fb:d5:35:0b:72:4f:1b:a2:89:df:
5a:59:a2:7a:1e:ba:de:6e:4d:21:a0:77:47:ee:f3:
8b:47:f0:23:63:bf:fb:ff:16:be:5e:89:da:f7:79:
51:c8:54:ee:92:e2:ba:8b:ef:e4:fd:e6:2c:cf:7f:
eb:32:f1:8d:95:c0:e1:3d:bb:c9:a7:ec:e8:f6:44:
1f:39:31:9f:7e:a5:29:95:9f:b6:a0:b7:4b:70:96:
26:f4:73:78:e1:06:73:ba:b5:4b:bb:e1:73:7a:b9:
5c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8D:B2:5B:0B:00:D2:14:53:9D:7C:51:D3:3A:82:60:B4:5E:23:C6
X509v3 Authority Key Identifier:
keyid:1E:E5:1E:D9:0C:49:CA:E9:2F:CA:2E:82:38:11:4C:76:38:38:04:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuUe2QxJyukvyi6COBFMdjg4BIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/RY2yWwsA0hRTnXxR0zqCYLReI8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/HuUe2QxJyukvyi6COBFMdjg4BIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.146.0/24
Signature Algorithm: sha256WithRSAEncryption
46:fc:e7:5a:da:ea:67:4c:23:47:df:a9:70:a5:bc:d7:e6:97:
2b:98:d6:06:53:de:64:0a:cf:97:cd:f2:b2:e4:fa:7d:06:88:
bc:95:6b:e8:2d:50:fa:2a:94:ac:a0:76:b5:d3:03:ed:be:a9:
f1:de:1e:49:e2:14:6f:88:36:73:91:ab:01:46:73:d8:c1:90:
c4:8b:f5:1a:c4:dc:16:14:4d:76:5a:15:0c:df:17:6f:0c:0d:
e1:b3:4f:d2:5c:0a:55:72:f0:3c:92:36:0f:cf:7c:fc:c5:68:
d1:8f:6d:6f:87:fc:4d:29:cd:16:5c:99:a3:b4:12:d3:b7:48:
c7:c3:fd:77:75:21:36:eb:b9:3f:bb:6a:5e:c6:0d:c2:2b:e9:
6f:c8:90:09:e6:52:4d:e0:99:84:18:cc:6a:3d:b5:83:78:fb:
ef:a4:ef:3e:b7:ac:fc:25:8a:64:d1:9f:e7:fb:11:30:82:8d:
7c:03:1b:0f:c0:4d:89:8e:82:a7:e0:91:7a:29:fb:e4:9b:6d:
cd:d3:ea:ca:7f:e5:d4:86:58:5a:36:5e:9e:7a:42:36:47:89:
26:15:68:94:ce:7d:2e:36:cd:c7:57:83:78:b9:8d:ec:48:cd:
f8:f2:09:70:b7:38:fc:84:c2:81:21:2e:00:b4:8e:75:8d:26:
3b:3d:7d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:40 2023 by rpki-client on console-fra.rpki-client.org